Topic: Transparency | Information duties
Authority: National Data Protection Authority of France (CNIL)
Sanction: € 50’000’000.-
The French national data protection authority found violations of the DSGVO when setting up a Google account with a mobile Android device. In particular, transparency and information obligations were violated. Essential information, such as the purposes of the data processing, the retention periods or the categories of personal data used for the personalisation of the advertisements, were distributed over several documents and could in some cases only be viewed with 6 clicks. Users were not able to fully understand the scope of the processing carried out by Google. The information must be easily accessible and understandable. Google has not accepted the ruling and has continued with it.
Source: